Messages

31

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-18, 03:03:42 »

Is it ok start IP?

[root@xmlvps ~]#  service iptables restart
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: nat mangle filter         [  OK  ]
Unloading iptables modules:                                [  OK  ]
Applying iptables firewall rules:                          [  OK  ]

32

Kloxo-MR Technical Helps / Re: what command iptables for block ip ?

« on: 2013-06-18, 01:36:03 »

I have many block ip 5310 line I think block ip in iptables comfortable

and i don't knpw how to block ip in kloxo mr

33

Kloxo-MR Technical Helps / what command iptables for block ip ?

« on: 2013-06-18, 00:57:32 »

Hello

what command iptables for block ip ?

this is error this command

iptables -A INPUT -s 218.30.0.0/16 -j DROP
iptables -A INPUT -s 100.43.0.0/16 -j DROP
iptables -A INPUT -s 180.76.0.0/16 -j DROP
iptables -A INPUT -s 180.76.5.0/24 -j DROP
iptables -A INPUT -s 220.181.0.0/13 -j DROP
iptables -A INPUT -s 220.181.0.0/15 -j DROP
iptables -A INPUT -s 220.181.0.0/16 -j DROP
iptables -A INPUT -s 220.181.108.0/24 -j DROP
iptables -A INPUT -s 123.125.0.0/13 -j DROP
iptables -A INPUT -s 123.125.0.0/14 -j DROP
iptables -A INPUT -s 123.125.0.0/16 -j DROP
iptables -A INPUT -s 1.202.0.0/16 -j DROP

Thank you

34

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-17, 23:10:32 »

status red light in service menu but it's enable in this status right

i don;t knowleadge about iptables

Thank you very much

[root@xmlvps ~]#  service iptables status
Table: nat
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Table: mangle
Chain PREROUTING (policy ACCEPT)
num  target     prot opt source               destination

Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Chain POSTROUTING (policy ACCEPT)
num  target     prot opt source               destination

Table: filter
Chain INPUT (policy ACCEPT)
num  target     prot opt source               destination
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain FORWARD (policy ACCEPT)
num  target     prot opt source               destination
1    RH-Firewall-1-INPUT  all  --  0.0.0.0/0            0.0.0.0/0

Chain OUTPUT (policy ACCEPT)
num  target     prot opt source               destination

Chain RH-Firewall-1-INPUT (2 references)
num  target     prot opt source               destination
1    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0
2    ACCEPT     icmp --  0.0.0.0/0            0.0.0.0/0           icmp type 255
3    ACCEPT     esp  --  0.0.0.0/0            0.0.0.0/0
4    ACCEPT     ah   --  0.0.0.0/0            0.0.0.0/0
5    ACCEPT     udp  --  0.0.0.0/0            224.0.0.251         udp dpt:5353
6    ACCEPT     udp  --  0.0.0.0/0            0.0.0.0/0           udp dpt:631
7    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           tcp dpt:631
8    ACCEPT     all  --  0.0.0.0/0            0.0.0.0/0           state RELATED,ESTABLISHED
9    ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:21
10   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:22
11   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:80
12   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:443
13   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:7777
14   ACCEPT     tcp  --  0.0.0.0/0            0.0.0.0/0           state NEW tcp dpt:7778
15   REJECT     all  --  0.0.0.0/0            0.0.0.0/0           reject-with icmp-host-prohibited

35

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-17, 22:56:59 »

use iptables not use iptables.kloxosave?

36

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-17, 22:55:54 »

# Firewall configuration written by system-config-securitylevel
# Manual customization of this file is not recommended.
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
:RH-Firewall-1-INPUT - [0:0]
-A INPUT -j RH-Firewall-1-INPUT
-A FORWARD -j RH-Firewall-1-INPUT
-A RH-Firewall-1-INPUT -i lo -j ACCEPT

-A RH-Firewall-1-INPUT -p icmp --icmp-type any -j ACCEPT
-A RH-Firewall-1-INPUT -p 50 -j ACCEPT
-A RH-Firewall-1-INPUT -p 51 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp --dport 5353 -d 224.0.0.251 -j ACCEPT
-A RH-Firewall-1-INPUT -p udp -m udp --dport 631 -j ACCEPT
-A RH-Firewall-1-INPUT -p tcp -m tcp --dport 631 -j ACCEPT

-A RH-Firewall-1-INPUT -m state --state ESTABLISHED,RELATED -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 22 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 80 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 443 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 7777 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 7778 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -m tcp -p tcp --dport 7779 -j ACCEPT
-A RH-Firewall-1-INPUT -m state --state NEW -p tcp --dport 21 -j ACCEPT
-A RH-Firewall-1-INPUT -j REJECT --reject-with icmp-host-prohibited

COMMIT <------------------30

code in iptables

[root@xmlvps ~]# service iptables restart
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: nat mangle filter         [  OK  ]
Unloading iptables modules:                                [  OK  ]
Applying iptables firewall rules: iptables-restore v1.3.5: no command specified
Error occurred at line: 30
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
                                                           [FAILED]

37

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-17, 22:21:33 »

I create file iptables.klxosave

[root@xmlvps ~]# service iptables restart
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: nat mangle filter         [  OK  ]
Unloading iptables modules:                                [  OK  ]




and i rename to iptables

[root@xmlvps ~]# service iptables restart
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: nat mangle filter         [  OK  ]
Unloading iptables modules:                                [  OK  ]
Applying iptables firewall rules: Bad argument `iptables'
Error occurred at line: 33
Try `iptables-restore -h' or 'iptables-restore --help' for more information.
                                                           [FAILED]

38

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-17, 15:15:00 »

I rename to iptables and modified but in service menu State red light

39

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-17, 13:10:57 »

[root@xmlvps ~]#  service iptables start
Flushing firewall rules:                                   [  OK  ]
Setting chains to policy ACCEPT: nat mangle filter         [  OK  ]
Unloading iptables modules:                                [  OK  ]

40

Kloxo-MR Technical Helps / Re: How can i start iptables in kloxo Mr

« on: 2013-06-17, 12:31:02 »

iptables - first light green - second red.  It will always display that way - probably iptables IS running.  If you need help configuring the rules i can help.  Check under processes.

Yes it's right.

Installing Kloxo-MR will be rename /etc/sysconfig/iptables and ip6tables to iptables.kloxosave and ip6tables.kloxasave if exists.

Purpose for renamed them because 'default' rules only permit access via port 22 (ssh) and then it make website, ftp, mail and Kloxo-MR panel unreachable.

You can rename to original name and modified rules.

I just rename iptables to iptables.kloxosave right and add block ip in iptables.kloxosave

41

Kloxo-MR Technical Helps / How can i start iptables in kloxo Mr

« on: 2013-06-17, 01:38:41 »

Dear Sir

How can i start iptables in kloxo Mr?

i use Centos 5.9 x64 and php53u + suphp event

I want to block bad ip in iptables

but i can't use iptables file and iptables start in service menu

Thank you

42

Kloxo-MR Technical Helps / How can i start iptables in kloxo Mr

« on: 2013-06-17, 01:12:05 »

Dear sir

How can i start iptables in kloxo Mr?

iptables.kloxosave

i want block ip in iptables but in service can't show start iptables

My system Centos 5.9 x64

Thank you